Hot answers tagged

29

You can use curl to check https://check.torproject.org/api/ip curl --socks5 localhost:9050 --socks5-hostname localhost:9050 -s https://check.torproject.org/api/ip If everything goes well, the output will be something like: {"IsTor":true,"IP":"185.220.101.169"} If IsTor is false, or there is an error or no output, tor is ...


10

Websites can request several configuration settings from your browser in order to help them printing the best page format for you. But by requesting your browser's specific abilities (here canvas is used for graphical rendering), websites could fingerprint your browser (if you have a unique configuration) across multiple sites. This is related to the ...


8

Torify is a simple wrapper that attempts to find the best underlying Tor wrapper available on a system. It calls torsocks or tsocks with a tor specific configuration file. It'll take measures to ensure that an application, which has not been designed for use with Tor (such as TorChat), will use only Tor for internet connectivity. Also ensure that there are ...


7

With the way the Tor Browser is currently built, it ships with a dedicated profile prepared in advance. That profile cannot be shared by multiple users. Also, as there is no update mechanism currently, every upgrades mean that the profile recreated from the clean profile shipped by the Tor Browser. The only safe solution currently is to have have each users ...


7

Short answer: Download Tails. Long answer that more properly answers your qustion and use case: Once Tor is installed (I'll leave that to you; I recommend using the official Tor repos for Debian), add the following to your torrc: AutomapHostsOnResolve 1 DNSPort 53530 TransPort 9040 If you're using selinux (I'm not familiar ...


6

This is not a good idea, in theory at least. (False security as programs may leak data) Adafruit offers a tutorial on how to do this using a Raspberry Pi running Raspbian (which is based on Debian). This should work fine on most Linux distros. sudo apt-get install tor Edit the tor config file by running sudo nano /etc/tor/torrc and copy ...


6

From the Arch Linux Wiki: chromium --proxy-server="socks5://127.0.0.1:9050" --host-resolver-rules="MAP * 0.0.0.0 , EXCLUDE myproxy" However as the wiki explicitly warns: this will be used for fetching http and https only, a great deal of work was put into ensuring "Proxy Obedience" in Tor Browser. Forcing Chromium to fetch content outside of the Tor proxy ...


5

usewithtor is deprecated, you want to use torsocks in it's place. Previously there were various incarnations, the commands were kept for backwards compatibility but torsocks is what torify/usewithtor have just been a wrapper around for some time now.


4

Current versions of Ubuntu (and probably other distros) use AppArmor, which can cause hard to debug error messages (e.g. Couldn't access/create private data directory despite permissions being set correctly). In order to be able to run a second Tor instance, I did: edit /etc/apparmor.d/local/system_tor and add two rules (if you use other file names/paths ...


4

I think the easiest is to quote the wikipedia entry: Canvas consists of a drawable region defined in HTML code with height and width attributes. JavaScript code may access the area through a full set of drawing functions similar to those of other common 2D APIs, thus allowing for dynamically generated graphics. Some anticipated uses of canvas ...


4

Usually Tor stores its log files in /var/log/tor. Depending from the specific settings you'll find /var/log/tor/notices.log, /var/log/tor/log, /var/log/tor/info.log, etc. The option Log in torrc specifies where the log file is stored and what kind of information is logged. So if you don't find the above mentioned files please have a look into your ...


4

Foreword Docker defines a container as a "A standardized unit of software" [1] and does in a nutshell provide the tooling needed to create self-contained containers - think of little neatly-wrapped presents - of software or as separate components working together to achieve a greater good. An example of such a deployment could be a website backed by Node.js ...


3

I came across this and think that best describes the situation https://www.propublica.org/article/meet-the-online-tracking-device-that-is-virtually-impossible-to-block This was from https://lists.torproject.org/pipermail/tor-talk/2014-July/033969.html


3

A relay requires a public IP address as it needs to accept incoming connections. As far as I can see from your routing table, your tunnel provider does not give you a public IP address. Your Tor log messages should currently contain something like: Your server has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, ...


3

Took a while, but finally made it work: Open the menu of the onion icon and click "Preferences...". In the window that opens select the "Security settings" tab. Uncheck "Don't record browsing history ... mode)" and "Restrict third party cookies ... data". In the content tab of the options window, uncheck "Block pop-up windows". Now you're all set to login to ...


3

Vidalia has been discontinued for a long time now because it has not been maintained to keep up with changes in tor. At present there is no officially recommended alternative, though I have heard some rumors about it being revived. To answer "Is there any way to use it?" Yes of course it is possible, but you should not use it. It is discontinued for a ...


3

It is really simple. Move file to be uploaded to ~/Tor Browser PersistentDir/Tor Browser These are the folders you can upload from or download to.


3

You can run any command as a different user using sudo: sudo -u my_user tor-browser-en If you need to use multiple commands you can do this: sudo -u my_user sh -c "first && second" If you want to background the application, you should not do this (it will only work as expected if you're already authenticated with sudo): sudo -u my_user tor-...


3

From the README: The getxbook program downloads books anonymously. Using it will still result in your IP address being logged (use torify to stop this)... torify is tool that attempts to wrap your terminal command in a Tor session. There's a good tutorial on what you need to do, here. Then it's just a case of running: torify <your_command>


3

What we can do to protect ourselves as VPN/Tor users? Note that the attack itself is targeted at the service, not the client (I.E. tor relay, not the tor client) so there isn't much you can do. If you run a relay then patch when it's available, in the mean time Akamai suggest increasing the net.ipv4.tcp_challenge_ack_limit to a value high enough that ...


3

Personally, I think the wiki stuff is outdated and needs some kinda purge with fire. Here's how Tails does it: #!/bin/sh unset http_proxy unset HTTP_PROXY unset https_proxy unset HTTPS_PROXY exec torsocks /usr/lib/wget/wget --passive-ftp "$@" This script is set as the default wget (through dpkg-divert, so that non-torified wget would be hard to ...


3

The tl;dr is that FTP and .onion do not go well together and never will, due to how the FTP protocol works. For more details, see below. FTP goes a little like this: Client connects to the "command" channel. Client logs in to the "command" channel. Client asks for some data over the "command" channel. If you're using Active Mode: Client opens up a ...


3

By default stdout and stderr of a systemd unit are sent to syslog. On my machine(Kali distro) it is stored in /var/log/syslog. So to see tor unit output run cat /var/log/syslog | grep tor -i Edit In case someone needs to monitor tor unit i found a better way. Adding -f or --follow flag to journalctl makes it to continuously print new entries as they are ...


3

This is a known issue: https://trac.torproject.org/projects/tor/ticket/27175 Looks like the fix will be released very soon with the next update.


2

Bootstrapping process If all you want to do is see the bootstrapping process the easiest way would be to simply run start-tor-browser from the command line (Windows, Linux, or anything else; the example below is from a Linux system) and watch the output. sam@stellata tor-browser_en-US $ ./start-tor-browser Launching Tor Browser Bundle for Linux in /home/...


2

You may sign in to google+ and youtube, and comment on youtube, however, you lose anonymity as soon as you do so. In addition, you will be marked as Tor user. Once somebody is marked as Tor user it becomes easier for adversaries to test the hypothesis of if it was you who visited a particular site or wrote particular comment even if you do not sign in, that ...


2

Tor doesn't use GnuTLS, but OpenSSL. So it is not affected by this vulnerability. You also might have heard about an attack on SSL (Triple handshake attack). Nick Mathewson wrote an analysis to tor-dev. According to him this also doesn't affect Tor.


2

I found a way to do that on linux: apt-get install tor download Multi-TOR from here: https://github.com/jseidl/Multi-TOR run ./multi-tor.sh 10 for 10 socks ports (for example) You can use selenium or splinter python (for example) and import socks port put the script on a while or for statement as u wish good luck from pyvirtualdisplay import Display import ...


Only top voted, non community-wiki answers of a minimum length are eligible